$ rpki-client -vvf repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft File: 8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft (raw, json) Hash identifier: DqL9JmrekkrESJTvmHmgqV/tIdnx0sTew8QJDPrgB/w= Subject key identifier: EC:CF:96:38:E5:AA:F5:9C:A1:9B:15:12:18:45:35:7D:B0:17:EC:9D Authority key identifier: 8B:E1:F5:0A:90:93:8A:E6:D4:E6:D7:A6:A2:A2:2F:00:3B:07:2E:D8 Certificate issuer: /CN=8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8 Certificate serial: 51B599D376BD337BF24BE3586BACC55983F19FFA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft Manifest number: 0320 Signing time: Sun 01 Mar 2026 15:21:47 +0000 Manifest this update: Sun 01 Mar 2026 15:16:47 +0000 Manifest next update: Wed 04 Mar 2026 19:11:47 +0000 Files and hashes: 1: 323430373a363338303a3a2f33322d3430203d3e20313331373133.roa (hash: d3EczDOEKFnJZSi/mXbv6kWPY6oK1SqyadhZuQpb4/8=) 2: 8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.crl (hash: mo20iCrErdPVTg9c7C7w/HvxSOC2aD5myVoqMN+c+dc=) 3: 3130332e392e3134342e302f32322d3234203d3e20313331373133.roa (hash: DgLKkC/jF8zKIVNdNQyUD9vzgLj84NQLEk3DQtPjHPw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.crl rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 19:11:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:b5:99:d3:76:bd:33:7b:f2:4b:e3:58:6b:ac:c5:59:83:f1:9f:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8 Validity Not Before: Mar 1 15:16:47 2026 GMT Not After : Mar 4 19:11:47 2026 GMT Subject: CN=ECCF9638E5AAF59CA19B15121845357DB017EC9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:fd:a2:7e:c0:da:3e:f0:3d:d5:3f:79:69:e3: 25:e8:88:7a:d9:d5:b6:13:93:b7:70:91:ee:74:68: 51:f9:48:3c:85:cd:a1:c8:0c:d8:0d:b2:14:60:12: 0d:1e:cc:e1:f7:88:74:63:5f:66:4a:c5:ee:50:5b: 61:57:d5:d6:89:5d:38:4e:d8:96:92:d8:74:69:2e: ed:db:d8:22:92:14:23:4f:31:13:9e:0a:a9:f1:ee: 8f:24:a3:fe:a6:19:45:c1:0a:db:0b:26:95:cb:0d: b3:1c:58:11:0c:44:81:8f:bf:27:65:28:3d:c0:0b: 1b:52:16:1d:87:e3:95:73:81:83:6f:f7:5a:0e:98: 61:3d:9d:72:d6:7e:1a:62:87:6c:c5:c3:3c:e0:06: ba:5b:3f:2e:46:1c:b6:45:5f:3c:c7:42:05:48:19: 92:49:b9:9c:b0:36:e3:fb:cb:2f:51:8f:f7:11:54: e0:78:e5:9e:b7:e0:e0:c9:76:b2:06:fa:18:94:52: 8c:a5:e6:a9:a4:29:fb:e7:ad:22:a4:84:2f:f2:89: 9e:cc:39:09:bd:fe:e5:94:82:e9:a0:27:ff:06:f0: 15:a5:96:04:f7:90:35:b7:1e:ff:a1:73:1e:10:9e: f6:92:ca:a1:15:30:96:5e:68:e8:5f:a9:a5:33:b4: 83:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:CF:96:38:E5:AA:F5:9C:A1:9B:15:12:18:45:35:7D:B0:17:EC:9D X509v3 Authority Key Identifier: keyid:8B:E1:F5:0A:90:93:8A:E6:D4:E6:D7:A6:A2:A2:2F:00:3B:07:2E:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:45:70:37:e2:2b:61:54:88:51:61:e1:07:37:61:21:54:76: a4:88:57:44:f1:b5:59:0d:96:b0:99:6f:dc:b0:e3:86:a0:29: 26:83:8a:cc:ca:5a:6b:b8:76:50:ab:ab:85:c4:69:42:be:51: 55:99:1a:e4:fe:9b:c0:1d:cd:f6:4f:73:7d:bc:c0:38:57:37: c5:06:03:e0:72:30:9a:88:82:4c:29:44:9a:66:07:a9:cb:73: 3d:9c:b5:30:39:12:04:62:4d:8d:07:3d:58:a1:12:2d:1c:ea: 3c:ca:2b:b8:59:d5:55:4e:de:eb:c3:5f:e6:b6:55:51:42:e6: 87:a2:7f:c8:49:53:b4:7b:4f:74:76:16:34:a3:38:81:67:8d: 95:91:64:c3:e3:e2:7a:4e:bf:21:1e:a3:61:60:c7:1d:dc:62: 94:8b:ed:7c:88:8c:ff:e0:67:e5:0a:fd:2a:bd:bb:4d:59:79: 94:5b:32:19:6a:68:eb:63:e4:15:a9:72:a7:08:6e:a6:44:da: b4:c2:e3:1c:ef:73:f1:27:66:76:81:88:44:ce:c9:d3:14:e7: 31:d6:24:73:07:eb:6a:96:43:14:1a:e1:c9:b0:d0:7f:c3:72: 11:4e:04:ff:57:88:f3:5f:c7:e1:6b:ce:b5:35:ef:12:82:6f: e7:61:21:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUbWZ03a9M3vyS+NYa6zFWYPxn/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFMUY1MEE5MDkzOEFFNkQ0RTZEN0E2QTJBMjJGMDAz QjA3MkVEODAeFw0yNjAzMDExNTE2NDdaFw0yNjAzMDQxOTExNDdaMDMxMTAvBgNV BAMTKEVDQ0Y5NjM4RTVBQUY1OUNBMTlCMTUxMjE4NDUzNTdEQjAxN0VDOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0/aJ+wNo+8D3VP3lp4yXoiHrZ 1bYTk7dwke50aFH5SDyFzaHIDNgNshRgEg0ezOH3iHRjX2ZKxe5QW2FX1daJXThO 2JaS2HRpLu3b2CKSFCNPMROeCqnx7o8ko/6mGUXBCtsLJpXLDbMcWBEMRIGPvydl KD3ACxtSFh2H45VzgYNv91oOmGE9nXLWfhpih2zFwzzgBrpbPy5GHLZFXzzHQgVI GZJJuZywNuP7yy9Rj/cRVOB45Z634ODJdrIG+hiUUoyl5qmkKfvnrSKkhC/yiZ7M OQm9/uWUgumgJ/8G8BWllgT3kDW3Hv+hcx4QnvaSyqEVMJZeaOhfqaUztIN7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7M+WOOWq9ZyhmxUSGEU1fbAX7J0wHwYDVR0j BBgwFoAUi+H1CpCTiubU5temoqIvADsHLtgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OGI1OGFlZS1lOGVlLTQyODctYTJiOC02MTYxNTVjM2VlYzIvMC84QkUxRjUwQTkw OTM4QUU2RDRFNkQ3QTZBMkEyMkYwMDNCMDcyRUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFMUY1MEE5MDkzOEFFNkQ0RTZEN0E2QTJBMjJGMDAzQjA3 MkVEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNThiNThhZWUtZThlZS00Mjg3LWEy YjgtNjE2MTU1YzNlZWMyLzAvOEJFMUY1MEE5MDkzOEFFNkQ0RTZEN0E2QTJBMjJG MDAzQjA3MkVEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGxFcDfiK2FUiFFh4Qc3YSFUdqSIV0TxtVkN lrCZb9yw44agKSaDiszKWmu4dlCrq4XEaUK+UVWZGuT+m8AdzfZPc328wDhXN8UG A+ByMJqIgkwpRJpmB6nLcz2ctTA5EgRiTY0HPVihEi0c6jzKK7hZ1VVO3uvDX+a2 VVFC5oeif8hJU7R7T3R2FjSjOIFnjZWRZMPj4npOvyEeo2Fgxx3cYpSL7XyIjP/g Z+UK/Sq9u01ZeZRbMhlqaOtj5BWpcqcIbqZE2rTC4xzvc/EnZnaBiETOydMU5zHW JHMH62qWQxQa4cmw0H/DchFOBP9XiPNfx+FrzrU17xKCb+dhIT8= -----END CERTIFICATE-----Generated at Mon Mar 2 11:18:47 2026 by rpki-client